Some checks are pending
CI — CoM Config Validation / Validate JSON Configs (push) Waiting to run
CI — CoM Config Validation / Validate YAML Configs (push) Waiting to run
CI — CoM Config Validation / Lint Shell Scripts (push) Waiting to run
CI — CoM Config Validation / Secret Detection (push) Waiting to run
CI — CoM Config Validation / Lint Markdown (push) Waiting to run
CI — CoM Config Validation / Validate CODEOWNERS (push) Waiting to run
Public, sanitized mirror of an AI orchestration command center: agents, skills, MCP servers, slash-command workflows. All infrastructure identifiers, hostnames, mesh IPs/subnets, repo paths, maintainer identity, and hardware fleet specifics scrubbed to <placeholders>; session debug logs and host-specific memory removed. No live credentials. Verified clean by automated leak sweep. See SANITIZATION.md. churchofmalware.org . authorized research only
1.8 KiB
1.8 KiB
Summary
Type of Change
feat— New feature (agent, skill, MCP server, workflow)fix— Bug fixsecurity— Security patch or hardeningdocs— Documentation updaterefactor— Code refactor (no behavior change)ci— CI/CD or GitHub config changechore— Maintenance task
Scope
- agents/
- skills/
- hooks/
- rules/
- a2a/ (constitution/governance)
- settings.json (MCP/permissions)
- .github/ (CI/templates/instructions)
- scripts/
- Other:
Security Checklist
- No secrets, tokens, API keys, or credentials in this PR
- No new
unsafecode (or justified + Aegis-audited if Rust) - No modifications to permission deny lists that reduce security
- No force-push, --no-verify, or chmod 777 patterns introduced
- Dependencies audited (cargo deny / pip audit / npm audit)
- Hook changes tested against full deny list patterns
- Settings.json changes validated against schema
Constitutional Alignment
- Agent shadow integration documented (not suppressed)
- Permission boundaries explicit and non-escalating
- Alignment axis assessed: Busytown / Neutral / Rapture-leaning
- Changes consistent with constitutional non-negotiables
Testing
- Manual testing on node
- Hook pattern validation
- Agent config schema check
- CI pipeline passes
- N/A (docs-only change)